openstack-ansible-security/releasenotes/notes/disable-failed-access-audit...

7 lines
306 B
YAML

---
fixes:
- Failed access logging is now disabled by default and can be enabled by
changing ``security_audit_failed_access`` to ``yes``. The rsyslog daemon
checks for the existence of log files regularly and this audit rule was
triggered very frequently, which led to very large audit logs.